
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
File: B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft (raw, json)
Hash identifier: RRtoNPvk7QHBFfAQAji5H6k3gC6xEZKX7iWc0O6jId4=
Subject key identifier: C4:40:D2:01:69:FD:94:B5:92:03:5D:A2:21:82:32:04:B7:02:E3:58
Authority key identifier: 07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
Certificate issuer: /CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Certificate serial: 050B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
Manifest number: 04EE
Signing time: Sun 02 Nov 2025 23:47:48 +0000
Manifest this update: Sun 02 Nov 2025 23:47:48 +0000
Manifest next update: Sun 09 Nov 2025 23:47:48 +0000
Files and hashes: 1: B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl (hash: 3Fm6aTFHQMa0gpPks7t4Dv/9PdYm6A+w6NmJjbBSj3Q=)
2: 6F155A6E144F11EE86CD7A23C4F9AE02.roa (hash: aI/sq9frDUa4oxfrwH2vEYRuVBCHaeAM/ywxuno+wUs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl
rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 23:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1291 (0x50b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B443, serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Validity
Not Before: Nov 2 23:47:48 2025 GMT
Not After : Nov 9 23:47:48 2025 GMT
Subject: CN=6907eda4-cd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:64:b9:96:37:83:91:4b:bb:81:69:56:d0:
8c:8a:f5:6d:fb:ba:dc:24:3a:0f:4e:b6:0e:a4:aa:
13:8d:03:79:5a:0f:28:4c:66:d9:ed:78:28:4b:cb:
ad:08:69:32:45:a7:69:cc:3e:91:45:df:8d:c5:d5:
9d:7d:9f:c2:9d:b9:d3:6e:e4:61:ce:03:d0:c7:30:
d3:c0:74:78:b5:ad:d4:df:8f:18:68:36:86:f9:01:
39:e3:e8:d0:3b:11:10:51:46:86:08:e0:f4:69:cb:
db:ad:bf:8b:3b:14:39:13:96:79:ef:f7:f5:57:24:
87:8b:60:8a:1a:cb:fa:dc:c7:b5:18:26:11:a8:b3:
e4:2d:d8:83:40:4d:d1:7c:9b:3b:89:b0:f0:1c:ed:
1e:d2:24:8a:af:50:90:57:95:c6:bb:5f:d0:32:8b:
c5:56:cb:66:05:e9:21:9e:82:bf:95:6e:99:40:37:
0b:3a:a6:8a:43:df:d1:6f:30:e9:a9:b0:f3:0a:db:
52:10:76:8e:71:b4:1b:21:3f:c0:dc:3f:6f:d2:16:
f1:88:c2:82:3f:80:52:45:7a:e2:0c:6b:79:e7:7a:
0f:8a:c9:fe:59:e9:ef:7e:25:38:ae:aa:f1:75:bf:
ac:55:5f:ea:3f:5c:02:24:86:6d:b0:d2:6d:01:f8:
40:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:40:D2:01:69:FD:94:B5:92:03:5D:A2:21:82:32:04:B7:02:E3:58
X509v3 Authority Key Identifier:
keyid:07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3c:85:a5:91:e5:79:b6:43:77:36:36:b5:f8:be:2f:4c:a0:
a7:e6:a1:4f:cf:46:70:be:43:9f:c5:84:8f:8a:b7:c3:01:65:
4d:e4:de:b1:1b:b4:98:ff:55:6d:cd:ab:15:db:28:bf:e8:58:
8a:b4:5f:89:ba:5b:68:b3:d5:bf:66:db:a6:11:e3:3a:39:79:
9d:04:71:7a:d5:4d:e9:2c:ce:68:ec:f6:db:85:37:97:d0:d7:
cd:b1:23:89:f4:6f:2c:8d:c7:d0:c5:1b:fb:61:60:d3:0b:9f:
aa:86:a5:de:39:63:2d:78:cc:46:ce:d6:44:08:33:b9:7d:79:
5d:2e:4a:a2:7f:35:42:ba:8b:59:dc:52:6d:60:7e:d7:71:db:
b6:5a:10:dd:32:15:d7:32:d5:04:1b:28:9f:f3:73:91:f3:27:
57:38:a3:19:98:17:53:f3:45:4f:9e:32:6c:6c:b7:0c:c5:25:
64:3c:af:c0:aa:c2:d9:e6:ec:98:e8:d6:b4:b7:46:e9:07:5e:
19:aa:d8:69:63:52:42:ef:b3:c0:d8:52:6d:6f:c0:c2:40:80:
d3:5f:fa:c6:bd:7c:0f:68:18:d8:93:92:48:29:36:4b:1c:05:
1c:8d:03:ef:61:da:f4:7c:43:36:4a:08:5a:cb:d7:8c:34:78:
bf:07:e2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:34:52 2025 by rpki-client